fix: add missing permission to get namespaces (#2728)

Author: dcoppa

deploy/helm/generated/role.yaml

@@ -20,6 +20,12 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - ""
+  resources:
+  - namespaces
+  verbs:
+  - get
 - apiGroups:
   - ""
   resources:

deploy/static/trivy-operator.yaml

@@ -3224,6 +3224,12 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - ""
+  resources:
+  - namespaces
+  verbs:
+  - get
 - apiGroups:
   - ""
   resources:

pkg/operator/cluster.go

@@ -329,6 +329,8 @@ func (r *ClusterController) numOfCoreComponentPodsAndNodes(ctx context.Context)
 	return corePodsCount + len(addonPods.Items), len(nodes.Items), nil
 }
 
+// +kubebuilder:rbac:groups="",resources=namespaces,verbs=get
+
 func (r *ClusterController) isOpenShift(ctx context.Context) bool {
 	_, err := r.clientset.CoreV1().Namespaces().Get(ctx, "openshift-kube-apiserver", metav1.GetOptions{})
 	return !k8sapierror.IsNotFound(err)